Staff Compliance Analyst

Join ServiceNow as a Staff Compliance Analyst, where you will contribute to and execute the Certification strategy, maintain existing third-party assurance programs, and drive the analysis and adoption of new programs. You will work collaboratively with Sales, Security, and Operations teams, monitor ServiceNow's controls, and drive changes within the organization through effective testing. This role requires a highly motivated, collaborative, and technically experienced individual with a strong understanding of cloud operational and security processes.

Responsibilities

• Contribuer à l'exécution de la stratégie de certification définie par la direction de la conformité en matière de sécurité.
• Maintenir les programmes d'assurance tiers existants et conduire l'analyse et l'adoption de nouveaux programmes.
• Collaborer avec les équipes de vente, de sécurité et d'opérations pour surveiller les contrôles de ServiceNow.

Requirements

• The successful candidate must be reliable, resourceful and have a “can-do” attitude
• Be able to work effectively with other members of the GRC organization to drive results
• Experience in leveraging or critically thinking about how to integrate AI into work processes, decision-making, or problem-solving. This may include using AI-powered tools, automating workflows, analyzing AI-driven insights, or exploring AI’s potential impact on the function or industry
• Experience using a GRC system

Excellent verbal and written communication skills

• Direct and recent working experience with at least three of the following compliance programs: ISO 27001, PCI, UK Cyber Essentials Plus, Spanish ENS, France HDS, TISAX & C5 in Germany, and/or SOC2
• 8+ years working in the field of cyber security compliance, security risk or audit or similar experience plus education
• Excellent report writing skills, ability to prepare compliance reports and associated metrics

Preferred

• Prior experience working in the Security and Compliance group at a SaaS/Cloud company or with Security and Risk practice of a Big Four firm
• Relevant professional certifications such as CISSP, CISA, CISM are desirable
• Demonstrated experience working in large projects